using FastEndpoints;
using GB5Shared.DTO.Framework.Login;
using GB5Shared.DTO.Framework.ResponseStandard;
using GB5Shared.FastEndPoint;
using RecruitmentBLL.FlsBridge;
using static GB5Shared.GB5Constant.Constant;

namespace RecruitmentSL.EndPoints.FlsBridge
{
    // Public, token-scoped — no Login header. The FLS access token is the sole access-control
    // mechanism, mirroring FLS's own GetRespondentByToken and TMS's identical GetFlsAttempt
    // endpoint. Genuinely no-login: a candidate/referee opens this link with no GB5 account.
    public class GetRecruitmentFlsAction : BaseEndpoint<GetRecruitmentFlsAction.Parameters, object>
    {
        private readonly IRecruitmentFlsBridgeBLL _BridgeBLL;

        public GetRecruitmentFlsAction(IRecruitmentFlsBridgeBLL bridgeBLL)
        {
            _BridgeBLL = bridgeBLL;
        }

        public override void Configure()
        {
            Get("/Recruitment/GetRecruitmentFlsAction");
            AllowAnonymous();
        }

        public record Parameters(
            [property: QueryParam] string Token
        );

        protected override string? GetCacheKey(Parameters req, LoginDTO login) => null;

        protected override async Task<ResponseStandardDTO<object>> ExecuteAsync(Parameters req, LoginDTO login, CancellationToken ct)
        {
            try
            {
                var result = await _BridgeBLL.GetActionAsync(req.Token, ct);
                return await GB5Shared.ResponseStandard.Response.CreateSuccessResponse(result, CacheKeyLevel.NOT_REQUIRED, login);
            }
            catch (Exception ex)
            {
                return await GB5Shared.ResponseStandard.Response.CreateExceptionError<string>(ex, CacheKeyLevel.NOT_REQUIRED, login, ex.Message, 500);
            }
        }
    }
}